Aaron Parecki

#oauth

• 

  Hi, I'm Aaron Parecki. I write about OAuth here, and I give talks about OAuth 2.0. Below you'll find my recent posts about various OAuth-related things, including talks I'm giving. I've also written two community resources about OAuth:

  OAuth 2.0 Simplified is a guide to OAuth 2.0 focused on writing clients that gives a clear overview of the spec at an introductory level.

  In 2017, I published a longer version of this guide as a book, available on oauth.com as well as a print version. The book guides you through building an OAuth server, and covers many details that are not part of the spec. I published this book in conjunction with Okta.

  Portland, Oregon

  Sat, Feb 4, 2017 11:35am -08:00 #oauth #oauth2

• 

  Join me and @vibronet tomorrow for another OAuth Happy Hour! This week seems like a good week to talk about what happens when "Sign In with Facebook" is down.
  
  📅 Oct 7 4pm Pacific
  
  https://www.youtube.com/watch?v=B3a3-JV-dl0

  Portland, Oregon, USA • 51°F

  9 likes 1 mention

  Wed, Oct 6, 2021 9:28am -07:00 #oauth
• OAuth 2.0 https://twitter.com/oauth_2

  New version available! "The OAuth 2.1 Authorization Framework" https://www.ietf.org/archive/id/draft-ietf-oauth-v2-1-04.html by @DickHardt @aaronpk @tlodderstedt #oauth #oauth2 #ietf

  Portland, Oregon • 55°F

  Wed, Oct 6, 2021 12:51am +00:00 (liked on Tue, Oct 5, 2021 5:52pm -07:00) #oauth #oauth2 #ietf
• I don’t like Identity Tokens | leastprivilege.com (leastprivilege.com)

  Fri, Oct 1, 2021 4:48pm -07:00 #oauth #oidc #openid #token
• 

  Join me in 20 minutes over on YouTube for a conversation with @bartosz_io about the future of #OAuth! https://www.youtube.com/watch?v=WPeulphAj6I

  Portland, Oregon • 53°F

  8 likes 4 reposts

  Tue, Sep 28, 2021 9:41am -07:00 #oauth
• Bartosz.io 👉 wsa.dev https://twitter.com/bartosz_io

  Today at 5 pm GMT we are streaming with @aaronpk to talk about the future of #OAuth 2.1+ 🚀
  
  #websec #websecurity #webdev #webdevelopment
  https://www.youtube.com/watch?v=WPeulphAj6I

  Portland, Oregon • 52°F

  Tue, Sep 28, 2021 7:35am +00:00 (liked on Tue, Sep 28, 2021 6:07am -07:00) #OAuth #websec #websecurity #webdev #webdevelopment
• ForgeRock Access Management 7.0.2 > OAuth 2.0 Guide > Authenticating Clients Using Mutual TLS (backstage.forgerock.com)

  Wed, Sep 22, 2021 4:19pm -07:00 #oauth #mtls
• Nat Sakimura https://twitter.com/_nat_en

  I actually do not agree with the characterization that PAR is an alternative to JAR. PAR complements JAR by profiling it down to a new endpoint called PAR Endpoint at AuthZ server. JAR is normatively required by PAR. #OAuth

  Portland, Oregon • 66°F

  Wed, Sep 22, 2021 3:16am +00:00 (liked on Tue, Sep 21, 2021 9:25pm -07:00) #OAuth
• 

  Twitter out here launching support for OAuth 2.0 just in time for OAuth 2.1 to come out 🤦‍♂️🤷‍♂️ https://twitter.com/twitterdev/status/1436020870875656196

  Portland, Oregon, USA • 73°F

  45 likes 6 reposts 10 replies

  Thu, Sep 9, 2021 8:17pm -07:00 #oauth
• Hands-on introduction to OAuth 2.0

  Sep

  2

  September 2, 2021 10:00am - 2:00pm (-0700)

  Online

  permalink #oauth #oreilly
• 

  For the last #DeveloperDay Labs session, I'm running a live workshop all about protecting your API with OAuth! Everyone who completes the exercise during the session will get a copy of my OAuth book! 🎉 Join me here in 5 minutes! https://developer-day.live/apis/

  Portland, Oregon • 78°F

  6 likes 3 reposts 2 replies

  Wed, Aug 25, 2021 3:53pm -07:00 #oauth #developerday
• API Tokens: A Tedious Survey · Fly (fly.io)

  Tue, Aug 24, 2021 4:36pm -07:00 #oauth #security #api
• Matt Raible https://twitter.com/mraible

  This was an excellent session from @aaronpk and @vibronet on the past and future of OAuth!
  
  Future stuff they mentioned:
  
  - RAR: Rich Authorization Requests (so you can add more to consent screens)
  - Sender-Constrained Access Tokens (to verify the sender)
  
  #OAuth #DeveloperDay

  Bellevue, Washington • 77°F

  Tue, Aug 24, 2021 7:15pm +00:00 (liked on Tue, Aug 24, 2021 3:03pm -07:00) #OAuth #DeveloperDay
• OAuth: Past, Present, and Future

  Aug

  24

  August 24, 2021 11:30am - 12:00pm (-0700)

  Online

  Developer Day

  permalink #oauth
• Changelog https://twitter.com/changelog

  🔥 New episode of The Changelog! 🔥
  
  📌 OAuth, "It's complicated."
  💫 with @aaronpk
  🎤 hosted by @adamstac @jerodsanto
  🗃️ #security
  
  💚 https://changelog.fm/456

  Portland, Oregon • 72°F

  Mon, Aug 23, 2021 11:02pm +00:00 (liked on Mon, Aug 23, 2021 4:03pm -07:00) #security #oauth
• The Changelog https://changelog.com/

  Today we’re joined by Aaron Parecki, co-founder of IndieWebCamp and maintainer of OAuth.net, for a deep dive on the state of OAuth 2.0 and what’s next in OAuth 2.1. We cover the complications of OAuth, RFCs like Proof Key for Code Exchange, also known as PKCE, OAuth for browser-based apps, and next generation specs like the Grant Negotiation and Authorization Protocol, also known as GNAP. The conversation begins with how Aaron experiments with the IndieWeb as a showcase of what’s possible.

  Mon, Aug 23, 2021 9:00am -07:00 (reposted on Mon, Aug 23, 2021 9:00am -07:00) #oauth #indieweb #changelog #podcast
• 🔑 OAuth 2.0 flows explained in GIFs - DEV Community (dev.to)

  Mon, Aug 16, 2021 2:36pm -07:00 #oauth
• Owncast https://botsin.space/@owncast

  OktaDev Live has just started streaming on their #owncast server! Check them out at:
  https://live.oktadev.events.

  OAuth Happy Hour

  #okta #security #api #oktadev #oauth

  

  Portland, Oregon • 102°F

  Thu, Aug 12, 2021 11:04pm +00:00 (liked on Thu, Aug 12, 2021 4:54pm -07:00) #oauth #oktadev #api #security #okta #owncast
• 

  Live now on YouTube + OwnCast! OAuth Happy Hour with me and @vibronet! 🎉 Come hang out and talk about OAuth for an hour or whatever!
  
  https://youtu.be/irkrhuLiPbc
  
  https://live.oktadev.events/

  Portland, Oregon • 102°F

  5 likes 1 repost

  Thu, Aug 12, 2021 4:01pm -07:00 #oauth
• Custom authentication in Azure Static Web Apps | Microsoft Docs (docs.microsoft.com)

  Fri, Jul 23, 2021 5:23pm -07:00 #azure #oauth #okta
• Using Okta with Static Web Apps - Microsoft Tech Community (techcommunity.microsoft.com)

  Fri, Jul 23, 2021 5:23pm -07:00 #azure #oauth #okta